Research Of Workflow-Oriented Access Control Technology

With the rapid popularization of computers and networks in various aspects of social life, workflow technology has become the coordination of business processes and increase automation of enterprise information technology. More and more people concern and attention research and application of workflow technology. However, research and application of the system based on workflow technology in terms of security for workflow technology itself is still very scarce, which makes system based on workflow technology many security issues and seriously restricted system based on workflow technology widely used in scientific research and enterprise. Therefore, research of system-oriented workflow technology in the security mechanism has very important significance.Technology of access control to solve aspects of the security of the system based on workflow technology is a very important technology. Through analyze and compare the several classical access control models, such as mandatory access control (MAC), discretionary access control (DAC), task-based access control (TBAC) and role-based access control (RBAC), these access control model are not well positioned to meet the demand of system based on workflow at access control,. Analyze system based on workflow technology in the access control status of research and then propose a rule description based access control model. The access control model is the workflow-oriented dynamic access control model to solve the problems that are the RBAC model is dynamic poor and TBAC model is particles large in the system based on workflow technology. If the model is applied for the workflow management system, it will improve the practicality and safety of system.In this paper, researched and analyzed the strengths and weaknesses of several major access control model and possibilities and limitations of these models applied to the systems based on workflow environmental. Based on the analysis of the particle size of several access control models applied to the systems based on workflow environmental and new demands that access control model must be stronger at the aspect of portability, a new access control model is proposed. The model is rule description based access control model. The core part of model is the language of the access control rules. Using the rule language to define access control rules, the rules can be access control of the workflow management system. At the same time, research the definition of access control rules and parsing rules. Devised and achieved the system based the workflow technology and applied the model. Tested and analyzed the system. Finally, a summary of this article have done. The summary included the research rule description based model and application that the model used. In future, the model will need to be improved and perfected and the prospect of the model will be.The innovation of this paper is to propose an access control rule language, the access control rules can be defined through the rule language. After the rules are converted to the conversion interface, the interface is called to the authorization system for access control of workflow management system.